CVE-2026-1731
Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)
BeyondTrust·Remote Support (RS) and Privileged Remote Access (PRA)
- Added
- Feb 13, 2026
- Fix due
- Feb 16, 2026
- Ransomware
- Known use
- Published
- Feb 6, 2026
- Updated
- Feb 26, 2026
- First covered
- Jul 7, 2026
- Latest story
- 4 months ago
Summary
BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the context of the site user.
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Attack profile
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:H/SA:LCISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Affected products
- BeyondTrust Remote Support(RS) & Privileged Remote Access(PRA)up to RS 25.3.1up to PRA 24.3.4